Re: Security and iSeries Navigator Management Central

[Lukas Beeler <lukas.beeler@xxxxxxxxxxxxxxxx>]

On Fri, Jul 23, 2010 at 19:24, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:
> Hey what can I say, I'm not the admin here....just a lowly
> developer...so of course I can't know anything about admin or
> security. Â:/

A developer should always be a superset of what an admin knows. After
all, when developing an application, security should always come
first. At least that's my understanding.

> IIRC, it was decided that it'd take too much CPU resources to run all
> 5250 traffic through SSL.

That's an interesting reasoning ;)

> I've downloaded the root CA cert, and loaded it using various methods,
> but I can't get it to work. ÂSee:
> http://archive.midrange.com/midrange-l/201007/msg00191.html
>
> If you got any thoughts as to what's wrong, I'd love to hear them.

Do you have the right root CA cert? I've always found IBM i Access's
SSL support "interesting" :)

I usually use openssl to debug SSL issues (Windows binaries here:
http://www.deanlee.cn/programming/openssl-for-windows/).

For example, do this:
openssl s_client -connect youribmi:992

This will show you which public certificate the Telnet/SSL server uses.